System and method for providing peer-to-peer virtual private network connections in multi-gateway enterprise networks

A computer-implemented system for providing peer-to-peer virtual private network (VPN) connections in multi-gateway enterprise networks, comprising:

• one or more hardware processors;
• a memory unit operatively connected to the one or more hardware processors, wherein the memory unit comprises a set of computer-readable instructions in form of a plurality of subsystems, configured to be executed by the one or more hardware processors, wherein the plurality of subsystems comprises:
• a cloud interaction subsystem configured to:
• obtain at least one of:
• routing data and one or more encryption keys from the multi-gateway enterprise networks;
• store the obtained at least one of:
• the routing data and the one or more encryption keys in one or more databases for communicating with an associated enterprise network within the multi-gateway enterprise networks;
• and
• dynamically update the stored at least one of:
• the routing data and the one or more encryption keys based on changes in the multi-gateway enterprise networks;
• a profile generation subsystem configured to generate a virtual private network (VPN) profile comprises a local internet protocol (IP) address for each user of one or more users to connect with the associated enterprise network within the multi-gateway enterprise networks;
• a network traffic framework subsystem configured to perform one of:
• encapsulate outgoing network traffic data obtained from the generated virtual private network (VPN) profile;
• transmit the encapsulated outgoing network traffic data to the associated enterprise network within the multi-gateway enterprise networks;
• decapsulate incoming network traffic data received from the associated enterprise network within the multi-gateway enterprise networks;
• and
• transmit the decapsulated incoming network traffic data to the virtual private network (VPN) profile;
• a tunnel proxy subsystem operatively connected to the cloud interaction subsystem and the network traffic framework subsystem, configured to:
• multiplex the encapsulated outgoing network traffic data based on at least one of:
• a security parameter index (SPI) of the encapsulated outgoing network traffic data, and at least one of:
• the routing data and the one or more encryption keys, for routing the outgoing network traffic data to the associated enterprise network within the multi-gateway enterprise networks;
• encrypt the multiplexed outgoing network traffic data with an apposite encryption key within the one or more encryption keys to determine the associated enterprise network within the multi-gateway enterprise networks for routing the outgoing network traffic data from the virtual private network (VPN) profile;
• de-multiplex the received incoming network traffic data from the associated enterprise network within the multi-gateway enterprise networks based on at least one of:
• the security parameter index (SPI) of the incoming network traffic data and at least one of:
• the routing data and the one or more encryption keys for routing the incoming network traffic data to the network traffic framework subsystem for decapsulating;
• decrypt the incoming network traffic data with the apposite encryption key within the one or more encryption keys to de-multiplex the received incoming network traffic data for identifying the virtual private network (VPN) profile of an associated user within the one or more users;
• and
• provide the peer-to-peer virtual private network (VPN) connections in the multi-gateway enterprise networks based on encrypting and decrypting the outgoing network traffic data and the incoming network traffic data respectively using at least one of:
• the routing data and the one or more encryption keys.

A non-transitory computer-readable storage medium storing computer-executable instructions that, when executed by one or more hardware processors, cause the one or more hardware processors to perform operations for providing peer-to-peer virtual private network (VPN) connections in multi-gateway enterprise networks, the operations comprising:

• obtaining at least one of:
• routing data and one or more encryption keys from the multi-gateway enterprise networks to store in one or more databases;
• generating a virtual private network (VPN) profile comprises a local internet protocol (IP) address for each user of one or more users to connect with the associated enterprise network within the multi-gateway enterprise networks;
• performing one of:
• encapsulating outgoing network traffic data obtained from the generated virtual private network (VPN) profile;
• transmitting the encapsulated outgoing network traffic data to the associated enterprise network within the multi-gateway enterprise networks;
• decapsulating incoming network traffic data received from the associated enterprise network within the multi-gateway enterprise networks;
• and
• transmitting the decapsulated incoming network traffic data to the virtual private network (VPN) profile;
• multiplexing the encapsulated outgoing network traffic data based on at least one of:
• a security parameter index (SPI) of the encapsulated outgoing network traffic data, and at least one of:
• the routing data and the one or more encryption keys, for routing the outgoing network traffic data to the associated enterprise network within the multi-gateway enterprise networks;
• encrypting the multiplexed outgoing network traffic data with an apposite encryption key within the one or more encryption keys to determine the associated enterprise network within the multi-gateway enterprise networks for routing the outgoing network traffic data from the virtual private network (VPN) profile;
• de-multiplexing the received incoming network traffic data from the associated enterprise network within the multi-gateway enterprise networks based on at least one of:
• the security parameter index (SPI) of the incoming network traffic data and at least one of:
• the routing data and the one or more encryption keys for routing the incoming network traffic data to a network traffic framework subsystem for decapsulating;
• decrypting the incoming network traffic data with the apposite encryption key within the one or more encryption keys to de-multiplex the received incoming network traffic data for identifying the virtual private network (VPN) profile of an associated user within the one or more users;
• and
• providing the peer-to-peer virtual private network (VPN) connections in the multi-gateway enterprise networks based on encrypting and decrypting the outgoing network traffic data and the incoming network traffic data respectively using at least one of:
• the routing data and the one or more encryption keys.